出典：Red Hatセキュリティアドバイザリ2016:2819：memcachedの更新プログラムが、Red Hat Enterprise Linux 7で利用可能になりました。Red Hat製品セキュリティは、この更新がセキュリティに及ぼす影響を重要度高と評価しています。詳細な重要度評価を示すCVSS（共通脆弱性評価システム）ベーススコアは、「参照」セクションでCVEリンクから脆弱性ごとに入手できます。memcachedは、本来は包括的な高性能分散メモリオブジェクトキャッシングシステムですが、データベースの負荷を軽減して動的なWebアプリケーションを高速化するために使用されます。セキュリティ修正プログラム：* ヒープベースのバッファオーバーフローを引き起こす2つの整数オーバーフローの欠陥が、memcachedバイナリプロトコルで見つかりました。攻撃者が特別に細工されたメッセージを作成して、memcachedサーバーのクラッシュを引き起こすか、任意のコードを実行する可能性があります。（CVE-2016-8704、CVE-2016-8705）* ヒープベースのバッファオーバーフローを発生させる整数オーバーフローの欠陥が、memcachedのSASL認証メッセージの解析に見つかりました。攻撃者が特別に細工されたメッセージを作成して、memcachedサーバーのクラッシュを引き起こすか、任意のコードを実行する可能性があります。（CVE-2016-8706）

memcachedの更新プログラムが、Red Hat Enterprise Linux 7で利用可能になりました。Red Hat製品セキュリティは、この更新がセキュリティに及ぼす影響を重要度高と評価しています。詳細な重要度評価を示すCVSS（共通脆弱性評価システム）ベーススコアは、「参照」セクションでCVEリンクから脆弱性ごとに入手できます。memcachedは、本来は包括的な高性能分散メモリオブジェクトキャッシングシステムですが、データベースの負荷を軽減して動的なWebアプリケーションを高速化するために使用されます。セキュリティ修正プログラム：* ヒープベースのバッファオーバーフローを引き起こす2つの整数オーバーフローの欠陥が、memcachedバイナリプロトコルで見つかりました。攻撃者が特別に細工されたメッセージを作成して、memcachedサーバーのクラッシュを引き起こすか、任意のコードを実行する可能性があります。（CVE-2016-8704、CVE-2016-8705）* ヒープベースのバッファオーバーフローを発生させる整数オーバーフローの欠陥が、memcachedのSASL認証メッセージの解析に見つかりました。攻撃者が特別に細工されたメッセージを作成して、memcachedサーバーのクラッシュを引き起こすか、任意のコードを実行する可能性があります。（CVE-2016-8706）

CVE-2016-8704、CVE-2016-8705、CVE-2016-8706のセキュリティ修正

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

memcachedの更新プログラムが、Red Hat Enterprise Linux 6で利用可能になりました。Red Hat製品セキュリティは、この更新がセキュリティに及ぼす影響を重要度高と評価しています。詳細な重要度評価を示すCVSS（共通脆弱性評価システム）ベーススコアは、「参照」セクションでCVEリンクから脆弱性ごとに入手できます。memcachedは、本来は包括的な高性能分散メモリオブジェクトキャッシングシステムですが、データベースの負荷を軽減して動的なWebアプリケーションを高速化するために使用されます。セキュリティ修正プログラム：* ヒープベースのバッファオーバーフローを引き起こす2つの整数オーバーフローの欠陥が、memcachedバイナリプロトコルで見つかりました。攻撃者が特別に細工されたメッセージを作成して、memcachedサーバーのクラッシュを引き起こすか、任意のコードを実行する可能性があります。（CVE-2016-8704、CVE-2016-8705）

CVE-2016-8704、CVE-2016-8705、CVE-2016-8706を修正する最新Upstreamリリースに更新してください。

注意：Tenable Network Securityは、前述の記述ブロックをFedora更新システムのWebサイトから直接抽出しています。
Tenableでは、新たな問題を持ち込まずに、できる限り自動的に整理して書式設定するようにしています。

Security fix for CVE-2016-8704, CVE-2016-8705, CVE-2016-8706

Note that Tenable Network Security has extracted the preceding description block directly from the Fedora update system website.
Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

An update for memcached is now available for Red Hat Enterprise Linux 7.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load.

Security Fix(es) :

* Two integer overflow flaws, leading to heap-based buffer overflows, were found in the memcached binary protocol. An attacker could create a specially crafted message that would cause the memcached server to crash or, potentially, execute arbitrary code. (CVE-2016-8704, CVE-2016-8705)

* An integer overflow flaw, leading to a heap-based buffer overflow, was found in memcached's parsing of SASL authentication messages. An attacker could create a specially crafted message that would cause the memcached server to crash or, potentially, execute arbitrary code.
(CVE-2016-8706)

Security Fix(es) :

  - Two integer overflow flaws, leading to heap-based buffer     overflows, were found in the memcached binary protocol.
    An attacker could create a specially crafted message     that would cause the memcached server to crash or,     potentially, execute arbitrary code. (CVE-2016-8704,     CVE-2016-8705)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in the memcached binary protocol. An attacker could create a specially crafted message that would cause the memcached server to crash or, potentially, execute arbitrary code. (CVE-2016-8704 , CVE-2016-8705)

An integer overflow flaw, leading to a heap-based buffer overflow, was found in memcached's parsing of SASL authentication messages. An attacker could create a specially crafted message that would cause the memcached server to crash or, potentially, execute arbitrary code.
(CVE-2016-8706)

According to the versions of the memcached package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

  - Two integer overflow flaws, leading to heap-based     buffer overflows, were found in the memcached binary     protocol. An attacker could create a specially crafted     message that would cause the memcached server to crash     or, potentially, execute arbitrary code.
    (CVE-2016-8704, CVE-2016-8705)

  - An integer overflow flaw, leading to a heap-based     buffer overflow, was found in memcached's parsing of     SASL authentication messages. An attacker could create     a specially crafted message that would cause the     memcached server to crash or, potentially, execute     arbitrary code.(CVE-2016-8706)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the memcached package installed, the EulerOS Virtualization for ARM 64 installation on the remote host is affected by the following vulnerabilities :

  - An integer overflow flaw, leading to a heap-based     buffer overflow, was found in the memcached binary     protocol. An attacker could create a specially crafted     message that would cause the memcached server to crash     or, potentially, execute arbitrary code.(CVE-2016-8704)

  - An integer overflow flaw, leading to a heap-based     buffer overflow, was found in the memcached binary     protocol. An attacker could create a specially crafted     message that would cause the memcached server to crash     or, potentially, execute arbitrary code.(CVE-2016-8705)

  - An integer overflow flaw, leading to a heap-based     buffer overflow, was found in memcached's parsing of     SASL authentication messages. An attacker could create     a specially crafted message that would cause the     memcached server to crash or, potentially, execute     arbitrary code.(CVE-2016-8706)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

According to the versions of the memcached package installed, the EulerOS Virtualization installation on the remote host is affected by the following vulnerabilities :

  - memcached before 1.4.17, when running in verbose mode,     allows remote attackers to cause a denial of service     (crash) via a request that triggers an 'unbounded key     print' during logging, related to an issue that was     'quickly grepped out of the source tree,' a different     vulnerability than CVE-2013-0179 and     CVE-2013-7290.(CVE-2013-7291)

  - An integer overflow flaw, leading to a heap-based     buffer overflow, was found in memcached's parsing of     SASL authentication messages. An attacker could create     a specially crafted message that would cause the     memcached server to crash or, potentially, execute     arbitrary code.(CVE-2016-8706)

  - An integer overflow flaw, leading to a heap-based     buffer overflow, was found in the memcached binary     protocol. An attacker could create a specially crafted     message that would cause the memcached server to crash     or, potentially, execute arbitrary code.(CVE-2016-8704)

  - The process_bin_delete function in memcached.c in     memcached 1.4.4 and other versions before 1.4.17, when     running in verbose mode, allows remote attackers to     cause a denial of service (segmentation fault) via a     request to delete a key, which does not account for the     lack of a null terminator in the key and triggers a     buffer over-read when printing to     stderr.(CVE-2013-0179)

  - An integer overflow flaw, leading to a heap-based     buffer overflow, was found in the memcached binary     protocol. An attacker could create a specially crafted     message that would cause the memcached server to crash     or, potentially, execute arbitrary code.(CVE-2016-8705)

  - memcached version prior to 1.4.37 contains an Integer     Overflow vulnerability in items.c:item_free() that can     result in data corruption and deadlocks due to items     existing in hash table being reused from free list.
    This attack appear to be exploitable via network     connectivity to the memcached service. This     vulnerability appears to have been fixed in 1.4.37 and     later.(CVE-2018-1000127)

  - memcached before 1.4.17 allows remote attackers to     bypass authentication by sending an invalid request     with SASL credentials, then sending another request     with incorrect SASL credentials.(CVE-2013-7239)

  - The do_item_get function in items.c in memcached 1.4.4     and other versions before 1.4.17, when running in     verbose mode, allows remote attackers to cause a denial     of service (segmentation fault) via a request to delete     a key, which does not account for the lack of a null     terminator in the key and triggers a buffer over-read     when printing to stderr, a different vulnerability than     CVE-2013-0179.(CVE-2013-7290)

Note that Tenable Network Security has extracted the preceding description block directly from the EulerOS security advisory. Tenable has attempted to automatically clean and format it as much as possible without introducing additional issues.

Security Fix(es) :

  - Two integer overflow flaws, leading to heap-based buffer     overflows, were found in the memcached binary protocol.
    An attacker could create a specially crafted message     that would cause the memcached server to crash or,     potentially, execute arbitrary code. (CVE-2016-8704,     CVE-2016-8705)

  - An integer overflow flaw, leading to a heap-based buffer     overflow, was found in memcached's parsing of SASL     authentication messages. An attacker could create a     specially crafted message that would cause the memcached     server to crash or, potentially, execute arbitrary code.
    (CVE-2016-8706)

This update for memcached fixes the following security issues :

  - CVE-2016-8704: Server append/prepend remote code     execution (boo#1007871)

  - CVE-2016-8705: Server update remote code execution     (boo#1007870)

  - CVE-2016-8706: Server ASL authentication remote code     execution (boo#1007869)

From Red Hat Security Advisory 2016:2820 :

An update for memcached is now available for Red Hat Enterprise Linux 6.

Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System (CVSS) base score, which gives a detailed severity rating, is available for each vulnerability from the CVE link(s) in the References section.

memcached is a high-performance, distributed memory object caching system, generic in nature, but intended for use in speeding up dynamic web applications by alleviating database load.

Security Fix(es) :

* Two integer overflow flaws, leading to heap-based buffer overflows, were found in the memcached binary protocol. An attacker could create a specially crafted message that would cause the memcached server to crash or, potentially, execute arbitrary code. (CVE-2016-8704, CVE-2016-8705)

Aleksandar Nikolic of Cisco Talos discovered several integer overflow vulnerabilities in memcached, a high-performance memory object caching system. A remote attacker can take advantage of these flaws to cause a denial of service (daemon crash), or potentially to execute arbitrary code.

ID	名稱	產品	系列	已發布	已更新	嚴重性
95276	Oracle Linux 7：memcached（ELSA-2016-2819）	Nessus	Oracle Linux Local Security Checks	2016/11/23	2021/1/14	critical
95356	CentOS 7：memcached（CESA-2016:2819）	Nessus	CentOS Local Security Checks	2016/11/28	2021/1/4	critical
94814	Fedora 24：memcached（2016-66c70cadb4）	Nessus	Fedora Local Security Checks	2016/11/15	2021/1/11	critical
95292	RHEL 6：memcached（RHSA-2016:2820）	Nessus	Red Hat Local Security Checks	2016/11/23	2019/10/24	critical
95372	CentOS 6：memcached（CESA-2016:2820）	Nessus	CentOS Local Security Checks	2016/11/29	2021/1/4	critical
95611	Fedora 25：memcached（2016-0c4e822340）	Nessus	Fedora Local Security Checks	2016/12/8	2021/1/11	critical
94804	Fedora 23 : memcached (2016-4df986a71f)	Nessus	Fedora Local Security Checks	2016/11/15	2021/1/11	critical
95291	RHEL 7 : memcached (RHSA-2016:2819)	Nessus	Red Hat Local Security Checks	2016/11/23	2019/10/24	critical
95293	Scientific Linux Security Update : memcached on SL6.x i386/x86_64 (20161123)	Nessus	Scientific Linux Local Security Checks	2016/11/23	2021/1/14	critical
94681	Amazon Linux AMI : memcached (ALAS-2016-761)	Nessus	Amazon Linux Local Security Checks	2016/11/11	2018/4/18	critical
99845	EulerOS 2.0 SP1 : memcached (EulerOS-SA-2016-1086)	Nessus	Huawei Local Security Checks	2017/5/1	2021/1/6	critical
124899	EulerOS Virtualization for ARM 64 3.0.1.0 : memcached (EulerOS-SA-2019-1396)	Nessus	Huawei Local Security Checks	2019/5/14	2024/5/23	critical
124938	EulerOS Virtualization 3.0.1.0 : memcached (EulerOS-SA-2019-1435)	Nessus	Huawei Local Security Checks	2019/5/14	2024/5/23	critical
95866	Scientific Linux Security Update : memcached on SL7.x x86_64 (20161123)	Nessus	Scientific Linux Local Security Checks	2016/12/15	2021/1/14	critical
94948	openSUSE Security Update : memcached (openSUSE-2016-1313)	Nessus	SuSE Local Security Checks	2016/11/18	2021/1/19	critical
95277	Oracle Linux 6 : memcached (ELSA-2016-2820)	Nessus	Oracle Linux Local Security Checks	2016/11/23	2021/1/14	critical
94521	Debian DSA-3704-1 : memcached - security update	Nessus	Debian Local Security Checks	2016/11/4	2021/1/11	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical

critical